Signature Detail
Short Name |
DB:SOLIDDB-LOG-FS |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
DB |
Keywords |
IBM solidDB Logging Function Format String Vulnerability |
Release Date |
2010/09/28 |
Update Number |
1780 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
DB: IBM solidDB Logging Function Format String Vulnerability
This signature detects attempts to exploit a known vulnerability against IBM solidDB. A successful attack can lead to arbitrary code execution.
Extended Description
IBM solidDB is prone to a format-string vulnerability affecting the logging function and three denial-of-service vulnerabilities. Attackers can exploit these issues to execute arbitrary code or to deny service to legitimate users. solidDB 06.00.1018 is vulnerable; other versions may also be affected.
Affected Products
- IBM solidDB 06.00.10.18
References
- BugTraq: 28468
- CVE: CVE-2008-1705